Windows NT/2000/XP Native API比较列表

INDEX	WINDOWS NT 4.0	WINDOWS 2000	WINDOWS　ＸＰ
0x00	NtAcceptConnectPort	NtAcceptConnectPort	NtAcceptConnectPort
0x01	NtAccessCheck	NtAccessCheck	NtAccessCheck
0x02	NtAccessCheckAndAuditAlarm	NtAccessCheckAndAuditAlarm	NtAccessCheckAndAuditAlarm
0x03	NtAddAtom	NtAccessCheckByType	NtAccessCheckByType
0x04	NtAdjustGroupsToken	NtAccessCheckByTypeAndAuditAlarm	NtAccessCheckByTypeAndAuditAlarm
0x05	NtAdjustPrivilegesToken	NtAccessCheckByTypeResultList	NtAccessCheckByTypeResultList
0x06	NtAlertResumeThread	NtAccessCheckByTypeResultListAndAuditAlarm	NtAccessCheckByTypeResultListAndAuditAlarm
0x07	NtAlertThread	NtAccessCheckByTypeResultListAndAuditAlarmByHandle	NtAccessCheckByTypeResultListAndAuditAlarmByHandle
0x08	NtAllocateLocallyUniqueld	NtAddAtom	NtAddAtom
0x09	NtAllocateUuids	NtAdjustGroupsToken	NtAddBootEntry
Ox 0A	NtAllocateVirtualMemory	NtAdjustPrivilegesToken	NtAdjustGroupsToken
Ox0B	NtCallbackReturn	NtAlerResumeThread	NtAdjustPrivilegesToken
Ox 0C	NtCancelloFile	NtAlertThread	NtAlertResumeThread
Ox0D	NtCancelTimer	NtAllocateLocallyUniqueId	NtAlertThread
Ox0E	NtClearEvent	NtAllocateUserPhysicalPages	NtAllocateLocallyUniqueId
Ox 0F	NtClose	NtAllocateUuids	NtAllocateUserPhysicalPages
0x10	NtCloseObjectAuditAlarm	NtAllocateVirtualMemory	NtAllocateUuids
0x11	NtCompleteConnectPort	NtAreMappedFilesTheSame	NtAllocateVirtualMemory
0x12	NtConnectPort	NtAssignProcessToJobObject	NtAreMappedFilesTheSame
0x13	NtContinue	NtCallbackReturn	NtAssignProcessToJobObject
0x14	NtCreateDirectoryObject	NtCancellIoFile	NtCallbackReturn
0x15	NtCreateEvent	NtCancelTi mer	NtCancelDeviceWakeupRequest
0x16	NtCreateEventPair	NtCancelDeviceWakeupRequest	NtCancelIoFile
0x17	NtCreateFile	NtClearEvent	NtCancelTimer
0x18	NtCreateloCompletion	NtClose	NtClearEvent
0x19	NtCreateKey	NtCloseObjectAuditAlarm	NtClose
0x 1A	NtCreateMailslotFile	NtCompleteConnectPort	NtCloseObjectAuditAlarm
0x1B	NtCreateMutant	NtConnectPort	NtCompactKeys
0x 1C	NtCreateNamedPipeFile	NtContinue	NtCompareTokens
0x1D	NtCreatePagingFile	NtCreateDirectoryObject	NtCompleteConnectPort
0x1E	NtCreatePort	NtCreateEvent	NtCompressKey
0X 1F	NtCreateProcess	NtCreateEventPair	NtConnectPort
0x20	NtCreateProfile	NtCreateFile	NtContinue
0x21	NtCreateSection	NtCreateloCompletion	NtCreateDebugObject
0x22	NtCreateSemaphore	NtCreateJobObject	NtCreateDirectoryObject
0x23	NtCreateSymbolicLinkObject	NtCreateKey	NtCreateEvent
0x24	NtCreateThread	NtCreateMailslotFile	NtCreateEventPair
0x25	NtCreateTimer	NtCreateMutant	NtCreateFile
0x26	NtCreateToken	NtCreateNamedPipeFile	NtCreateIoCompletion
0x27	NtDelayExecution	NtCreatePagingFile	NtCreateJobObject
0x28	NtDeleteAtom	NtCreatePort	NtCreateJobSet
0x29	NtDeleteFile	NtCreateProcess	NtCreateKey
Ox 2A	NtDeleteKey	NtCreateProfile	NtCreateMailslotFile
Ox2B	NtDeleteObjectAuditAlarm	NtCreateSection	NtCreateMutant
Ox 2C	NtDeleteValueKey	NtCreateSemaphore	NtCreateNamedPipeFile
Ox2D	NtDeviceloControlFile	NtCreateSymbolicLinkObject	NtCreatePagingFile
Ox2E	NtDisplayString	NtCreateThread	NtCreatePort
Ox 2F	NtDuplicateObject	NtCreateTimer	NtCreateProcess
0x30	NtDuplicateToken	NtCreateToken	NtCreateProcessEx
0x31	NtEnumerateKey	NtCreateWaitablePort	NtCreateProfile
0x32	NtEnumerateValueKey	NtDelayExecution	NtCreateSection
0x33	NtExtendSection	NtDeleteAtom	NtCreateSemaphore
0x34	NtFindAtom	NtDeleteFile	NtCreateSymbolicLinkObject
0x35	NtFlushBuffersFile	NtDeleteKey	NtCreateThread
0x36	NtFlushlnstructionCache	NtDeleteObj ectAuditAlarm	NtCreateTimer
0x37	NtFlushKey	NtDeleteValueKey	NtCreateToken
0x38	NtFlushVirtualMemory	NtDeviceIoControlFile	NtCreateWaitablePort
0x39	NtFlushWriteBuffer	NtDisplayString	NtDebugActiveProcess
Ox 3A	NtFreeVirtualMemory	NtDuplicateObject	NtDebugContinue
Ox3B	NtFsControlFile	NtDuplicateToken	NtDelayExecution
Ox 3C	NtGetContextThread	NtEnumerateKey	NtDeleteAtom
Ox3D	NtGetPlugPlayEvent	NtEnumerateValueKey	NtDeleteBootEntry
Ox3E	NtGetTickCount	NtExtendSection	NtDeleteFile
Ox 3F	NtImpersonateClientPort	NtFilterToken	NtDeleteKey
0x40	NtImpernateThread	NtFindAtom	NtDeleteObjectAuditAlarm
0x41	NtInitializeRegistry	NtFlushBuffersFile	NtDeleteValueKey
0x42	NtListenPort	NtFlushlnstructionCache	NtDeviceIoControlFile
0x43	NtLoadDriver	NtFlushKey	NtDisplayString
0x44	NtLoadKey	NtFlushVirtualMemory	NtDuplicateObject
0x45	NtLoadKey2	NtFlushWriteBuffer	NtDuplicateToken
0x46	NtLockFile	NtFreeUserPhysicalPages	NtEnumerateBootEntries
0x47	NtLockVirtualMemory	NtFreeVirtualMemory	NtEnumerateKey
0x48	NtMakeTemporaryObject	NtFsControlFile	tEnumerateSystemEnvironmentValuesEx
0x49	NtMapViewOfSection	NtGetContextThread	NtEnumerateValueKey
Ox 4A	NtNotifyChangeDirectoryFile	NtGetDevicePowerState	NtExtendSection
Ox4B	NtNotifyChangeKey	NtGetPlugPlayEvent	NtFilterToken
Ox 4C	NtOpenDirectoryObject	NtGetTickCount	NtFindAtom
Ox4D	NtOpenEvent	NtGetWriteWatch	NtFlushBuffersFile
Ox4E	NtOpenEventPair	NtImpersonateAnoymousToken	NtFlushInstructionCache
Ox 4F	NtOpenFile	NtImpersonateClientOfPort	NtFlushKey
0x50	NtOpenloCompletion	NtImpersonateThread	NtFlushVirtualMemory
0x51	NtOpenKey	NtInitializeRegistry	NtFlushWriteBuffer
0x52	NtOpenMutant	NtInitialiatePowerAction	NtFreeUserPhysicalPages
0x53	NtOpenObjectAuditAlarm	NtIsSystemResumeAutomatic	NtFreeVirtualMemory
0x54	NtOpenProcess	NtListenPort	NtFsControlFile
0x55	NtOpenProcessToken	NtLoadDriver	NtGetContextThread
0x56	NtOpenSection	NtLoadKey	NtGetDevicePowerState
0x57	NtOpenSemaphore	NtLoadKey2	NtGetPlugPlayEvent
0x58	NtOpenSymbolicLinkObject	NtLockFile	NtGetWriteWatch
0x59	NtOpenThread	NtLockVirtualMemory	NtImpersonateAnonymousToken
Ox 5A	NtOpenThreadToken	NtMakeTemporaryObject	NtImpersonateClientOfPort
Ox5B	NtOpenTimer	NtMapUserPhysicalPages	NtImpersonateThread
Ox 5C	NtPlugPlayControl	NtMapUserPhysicalPagesScatter	NtInitializeRegistry
Ox5D	NtPrivilegeCheck	NtMapViewOfSection	NtInitiatePowerAction
Ox5E	NtPrivilegedServiceAuditAlarm	NtNotifyChangeDirectoryFile	NtIsProcessInJob
Ox 5F	NtPrivilegeObjectAuditAlarm	NtNotifyChangeKey	NtIsSystemResumeAutomatic
0x60	NtProtectVirtualMemory	NtNotifyChangeMultipleKeys	NtListenPort
0x61	NtPulseEvent	NtOpenDirectoryObject	NtLoadDriver
0x62	NtQueryInformationAtom	NtOpenEvent	NtLoadKey
0x63	NtQueryAttributesFile	NtOpenEventPair	NtLoadKey2
0x64	NtQueryDefaultLocale	NtOpenFile	NtLockFile
0x65	NtQueryDirectoryFile	NtOpenIoCompletion	NtLockProductActivationKeys
0x66	NtQueryDirectoryObject	NtOpenJobObject	NtLockRegistryKey
0x67	NtQueryEaFile	NtOpenKey	NtLockVirtualMemory
0x68	NtQueryEvent	NtOpenMutant	NtMakePermanentObject
0x69	NtQueryFullAttributesFile	NtOpenObjectAuditAlarm	NtMakeTemporaryObject
Ox 6A	NtQueryInformationFile	NtOpenProcess	NtMapUserPhysicalPages
Ox6B	NtQueryIoCompletion	NtOpenProcessToken	NtMapUserPhysicalPagesScatter
Ox 6C	NtQueryInformationPort	NtOpenSection	NtMapViewOfSection
Ox6D	NtQueryInformationProcess	NtOpenSemaphore	NtModifyBootEntry
Ox6E	NtQueryInformationThread	NtOpenSymbolicLinkObject	NtNotifyChangeDirectoryFile
Ox 6F	NtQuerylnformationToken	NtOpenThread	NtNotifyChangeKey
0x70	NtQuerylntervalProfile	NtOpenThreadToken	NtNotifyChangeMultipleKeys
0x71	NtQueryKey	NtOpenTimer	NtOpenDirectoryObject
0x72	NtQueryMultipleValueKey	NtPlugPlayControl	NtOpenEvent
0x73	NtQueryMutant	NtPowerInformation	NtOpenEventPair
0x74	NtQueryObject	NtPrivilegeCheck	NtOpenFile
0x75	NtQueryOleDirectoryFile	NtPrivilegedServiceAuditAlarm	NtOpenIoCompletion
0x76	NtQueryPerformanceCounter	NtPrivilegeObjectAuditAlarm	NtOpenJobObject
0x77	NtQuerySection	NtProtectVirtualMemory	NtOpenKey
0x78	NtQuerySecurityObject	NtPulseEvent	NtOpenMutant
0x79	NtQuery Semaphore	NtQueryInformationAtom	NtOpenObjectAuditAlarm
Ox 7A	NtQuerySymbolicLinkObject	NtQueryAttributesFile	NtOpenProcess
Ox7B	NtQuerySystemEnvironmentValue	NtQueryDefaultLocale	NtOpenProcessToken
Ox 7C	NtQuerySystemInformation	NtQueryDefaultUILanguage	NtOpenProcessTokenEx
Ox7D	NtQuerySystemTime	NtQueryDirectoryFile	NtOpenSection
Ox7E	NtQuery Timer	NtQueryDirectoryObject	NtOpenSemaphore
Ox 7F	NtQueryTimerResolution	NtQueryEaFile	NtOpenSymbolicLinkObject
0x80	NtQuery ValueKey	NtQueryEvent	NtOpenThread
0x81	NtQuery VirtualMemory	NtQueryFullAttributesFile	NtOpenThreadToken
0x82	NtQuery	NtQueryInformationFile	NtOpenThreadTokenEx
0x83	NtQueueApcThread	NtQueryInformationJobObject	NtOpenTimer
0x84	NtRaiseException	NtQueryIoCompletion	NtPlugPlayControl
0x85	NtRaiseHardError	NtQueryInformationPort	NtPowerInformation
0x86	NtReadFile	NtQueryInformationProcess	NtPrivilegeCheck
0x87	NtReadFileScatter	NtQueryInformationThread	NtPrivilegeObjectAuditAlarm
0x88	NtReadRequestData	NtQueryInformationToken	NtPrivilegedServiceAuditAlarm
0x89	NtReadVirtualMemory	NtQueryInstallUILanguage	NtProtectVirtualMemory
Ox 8A	NtRegisterThreadTerminatePort	NtQueryIntervalProfile	NtPulseEvent
Ox8B	NtReleaseMutant	NtQueryKey	NtQueryAttributesFile
Ox 8C	NtReleaseSemaphore	NtQuery Multiple	NtQueryBootEntryOrder
Ox8D	NtRemoveIoCompletion	NtQuery Mutant	NtQueryBootOptions
Ox8E	NtReplaceKey	NtQueryObject	NtQueryDebugFilterState
Ox 8F	NtReplyPort	NtQueryOpenSubKeys	NtQueryDefaultLocale
0x90	NtReplyWaitReceivePort	NtQueryPerformanceCounter	NtQueryDefaultUILanguage
0x91	NtReplyWaitReplyPort	NtQueryQuotalnformationFile	NtQueryDirectoryFile
0x92	NtRequestPort	NtQuerySection	NtQueryDirectoryObject
0x93	NtRequestWaitReplyPort	NtQuerySecurityObject	NtQueryEaFile
0x94	NtResetEvent	NtQuery Semaphore	NtQueryEvent
0x95	NtRestoreKey	NtQuerySymbolicLinkObject	NtQueryFullAttributesFile
0x96	NtResumeThread	NtQuerySystemEnvironmentValue	NtQueryInformationAtom
0x97	NtSaveKey	NtQuerySystemInformation	NtQueryInformationFile
0x98	NtSetloCompletion	NtQuerySystemTime	NtQueryInformationJobObject
0x99	NtSetContextThread	NtQueryTimer	NtQueryInformationPort
Ox 9A	NtSetDefaultHardErrorPort	NtQueryTimerResolution	NtQueryInformationProcess
Ox9B	NtSetDefaultLocale	NtQueryValueKey	NtQueryInformationThread
Ox 9C	NtSetEaFile	NtQueryVirtualMemory	NtQueryInformationToken
Ox9D	NtSetEvent	NtQueryVolumeInformationFile	NtQueryInstallUILanguage
Ox9E	NtSetHighEventPair	NtQueryApcThread	NtQueryIntervalProfile
Ox 9F	NtSetHighWaitLowEventPair	NtRaiseException	NtQueryIoCompletion
OxAO	NtSetHighWaitLowThread	NtRaiseHardError	NtQueryKey
0xA1	NtSetInformationFile	NtReadFile	NtQueryMultipleValueKey
OxA2	NtSetInformationKey	NtReadFileScatter	NtQueryMutant
OxA3	NtSetInformationObject	NtReadRequestData	NtQueryObject
OxA4	NtSetInformationProcess	NtReadVirtualMemory	NtQueryOpenSubKeys
OxA5	NtSetInformationThread	NtRegisterThreadTerminatePort	NtQueryPerformanceCounter
OxA6	NtSetInformationToken	NtReleaseMutant	NtQueryQuotaInformationFile
OxA7	NtSetIntervalProfile	NtReleaseSemaphore	NtQuerySection
OxA8	NtSetLdtEntries	NtRemoveIoCompletion	NtQuerySecurityObject
OxA9	NtSetLowEventPair	NtReplaceKey	NtQuerySemaphore
OxAA	NtSetLowWaitHighEventPair	NtReplyPort	NtQuerySymbolicLinkObject
OxAB	NtSetLowWaitHighThread	NtReplyWaitReceivePort	NtQuerySystemEnvironmentValue
OxAC	NtSetSecurity	NtReplyWaitReceivePortEx	NtQuerySystemEnvironmentValueEx
OxAD	NtSetSystemEnvironmentValue	NtReplyWaitRepiyPort	NtQuerySystemInformation
OxAE	NtSetSystemInformation	NtRequestDeviceWakeup	NtQuerySystemTime
OxAF	NtSetSystemPowerState	NtRequestPort	NtQueryTimer
OxBO	NtSetSystemTime	NtRequestWaitReplyPort	NtQueryTimerResolution
0xB1	NtSetTimer	NtRequestWakeupLatency	NtQueryValueKey
OxB2	NtSetTimerResolution	NtResetEvent	NtQueryVirtualMemory
OxB3	NtSetValueKey	NtResetWriteWatch	NtQueryVolumeInformationFile
OxB4	NtSetVolumeInformationFile	NtRestoreKey	NtQueueApcThread
OxB5	NtShutdownSystem	NtResumeThread	NtRaiseException
OxB6		NtSaveKey	NtRaiseHardError
OxB7	NtStartProfile	NtSaveMergedKeys	NtReadFile
OxB8	NtStopProfile	NtSecureConnectPort	NtReadFileScatter
OxB9	NtSuspendThread	NtSetIoCompletion	NtReadRequestData
OxBA	NtSystemDebugControl	NtSetContextThread	NtReadVirtualMemory
OxBB	NtTerminateProcess	NtSetDefaultHardErrorPort	NtRegisterThreadTerminatePort
OxBC	NtTerminateThread	NtSetDefaultLocale	NtReleaseMutant
OxBD	NtTestAlert	NtSetDefaultUILanguage	NtReleaseSemaphore
OxBE	NtUnloadDriver	NtSetEaFile	NtRemoveIoCompletion
OxBF	NtUnloadKey	NtSetEvent	NtRemoveProcessDebug
OxCO	NtUnlockFile	NtSetHighEventPair	NtRenameKey
0xC1	NtSetHighWaitLowEventPair	NtUnlockVirtualMemory	NtReplaceKey
OxC2	NtUnmapViewOfSection	NtSetInformationFile	NtReplyPort
OxC3	NtVdmControl	NtSetInformationJobObject	NtReplyWaitReceivePort
OxC4	NtWaitForMultipleObjects	NtSetInformationKey	NtReplyWaitReceivePortEx
OxC5	NtWaitForSingleObject	NtSetInformationObject	NtReplyWaitReplyPort
OxC6	NtWaitHighEventPair	NtSetInformationProcess	NtRequestDeviceWakeup
OxC7	NtWaitLowEventPair	NtSetInformationThread	NtRequestPort
OxC8	NtWriteFile	NtSetInformationToken	NtRequestWaitReplyPort
OxC9	NtWriteFileGather	NtSetIntervalProfile	NtRequestWakeupLatency
OxCA	NtWriteRequestData	NtSetLdtEntries	NtResetEvent
OxCB	NtWriteVirtualMemory	NtSetLowEventPair	NtResetWriteWatch
OxCC	NtCreateChannel	NtSetLowWaitHighEventPair	NtRestoreKey
OxCD	NtListenChannel	NtSetQuotaInformationFile	NtResumeProcess
OxCE	NtOpenChannel	NtSetSecurityObject	NtResumeThread
OxCF	NtReplyWaitSendChannel	NtSetSystemEnvironmentValue	NtSaveKey
OxDO	NtSendWaitReplyChannel	NtSetSystemInformation	NtSaveKeyEx
0xD1	NtSetContextChannel	NtSetSystemPowerSrate	NtSaveMergedKeys
OxD2	NtYieldExecution	NtSetSystemTime	NtSecureConnectPort
OxD3	N/A	NtSetThreadExecutionState	NtSetBootEntryOrder
OxD4	N/A	NtSetTimer	NtSetBootOptions
OxD5	N/A	NtSetTimerResolution	NtSetContextThread
OxD6	N/A	NtSetUuidSeed	NtSetDebugFilterState
OxD7	N/A	NtSetValueKey	NtSetDefaultHardErrorPort
0xD8	N/A	NtSetVolumeInformationFile	NtSetDefaultLocale
OxD9	N/A	NtShutdownSystem	NtSetDefaultUILanguage
OxDA	N/A	NtSignalAndWaitForSingleObject	NtSetEaFile
OxDB	N/A	NtStartProfile	NtSetEvent
OxDC	N/A	NtStopProfile	NtSetEventBoostPriority
OxDD	N/A	NtSuspendThread	NtSetHighEventPair
OxDE	N/A	NtSystemDebugControl	NtSetHighWaitLowEventPair
OxDF	N/A	NtTerminateJobObject	NtSetInformationDebugObject
OxEO	N/A	NtTerminateProcess	NtSetInformationFile
0xE1	N/A	NtTerminateThread	NtSetInformationJobObject
OxE2	N/A	NtTestAlert	NtSetInformationKey
OxE3	N/A	NtUnloadDriver	NtSetInformationObject
OxE4	N/A	NtUnloadKey	NtSetInformationProcess
OxE5	N/A	NtUnlockFile	NtSetInformationThread
OxE6	N/A	NtUnlockVirtualMemory	NtSetInformationToken
OxE7	N/A	NtUnmapViewOfSection	NtSetIntervalProfile
OxE8	N/A	NtVdmControl	NtSetIoCompletion
OxE9	N/A	NtWaitForMutipleObjects	NtSetLdtEntries
OxEA	N/A	NtWaitForSingleObject	NtSetLowEventPair
OxEB	N/A	NtWaitHighEventPair	NtSetLowWaitHighEventPair
OxEC	N/A	NtWaitLowEventPair	NtSetQuotaInformationFile
OxED	N/A	NtWriteFile	NtSetSecurityObject
OxEE	N/A	NtWriteFileGather	NtSetSystemEnvironmentValue
OxEF	N/A	NtWriteRequestData	NtSetSystemEnvironmentValueEx
OxFO	N/A	NtWriteVirtualMemory	NtSetSystemInformation
0xF1	N/A	NtCreateChannel	NtSetSystemPowerState
OxF2	N/A	NtListenChannel	NtSetSystemTime
OxF3	N/A	NtOpenChannel	NtSetThreadExecutionState
OxF4	N/A	NtReplyWaitSendChannel	NtSetTimer
OxF5	N/A	NtSendWaitReplyChannel	NtSetTimerResolution
OxF6	N/A	NtSetContextChannel	NtSetUuidSeed
OxF7	N/A	NtYieldExecution	NtSetValueKey
0F 8h	N/A	N/A	NtSetVolumeInformationFile
0F 9h	N/A	N/A	NtShutdownSystem
0FAh	N/A	N/A	NtSignalAndWaitForSingleObject
0FBh	N/A	N/A	NtStartProfile
0FCh	N/A	N/A	NtStopProfile
0FDh	N/A	N/A	NtSuspendProcess
0FEh	N/A	N/A	NtSuspendThread
0FFh	N/A	N/A	NtSystemDebugControl
100h	N/A	N/A	NtTerminateJobObject
101h	N/A	N/A	NtTerminateProcess
102h	N/A	N/A	NtTerminateThread
103h	N/A	N/A	NtTestAlert
104h	N/A	N/A	NtTraceEvent
105h	N/A	N/A	NtTranslateFilePath
106h	N/A	N/A	NtUnloadDriver
107h	N/A	N/A	NtUnloadKey
108h	N/A	N/A	NtUnloadKeyEx
109h	N/A	N/A	NtUnlockFile
10Ah	N/A	N/A	NtUnlockVirtualMemory
10Bh	N/A	N/A	NtUnmapViewOfSection
10Ch	N/A	N/A	NtVdmControl
10Dh	N/A	N/A	NtWaitForDebugEvent
10Eh	N/A	N/A	NtWaitForMultipleObjects
10Fh	N/A	N/A	NtWaitForSingleObject
110h	N/A	N/A	NtWaitHighEventPair
111h	N/A	N/A	NtWaitLowEventPair
112h	N/A	N/A	NtWriteFile
113h	N/A	N/A	NtWriteFileGather
114h	N/A	N/A	NtWriteRequestData
115h	N/A	N/A	NtWriteVirtualMemory
116h	N/A	N/A	NtYieldExecution
117h	N/A	N/A	NtCreateKeyedEvent
118h	N/A	N/A	NtOpenKeyedEvent
119h	N/A	N/A	NtReleaseKeyedEvent
11Ah	N/A	N/A	NtWaitForKeyedEvent
11Bh	N/A	N/A	NtQueryPortInformationProcess